CVE-2021-30835
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.1%
exploitation probability
3.1%top 13% of all CVEs
observed exploitation
nono source reports it
This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, iTunes 12.12 for Windows, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected products
Apple · iOS and iPadOSApple · iTunes for WindowsApple · Security Update - CatalinaApple · tvOSApple · watchOSReferences
http://seclists.org/fulldisclosure/2021/Oct/61http://seclists.org/fulldisclosure/2021/Oct/62http://seclists.org/fulldisclosure/2021/Oct/63https://support.apple.com/en-us/HT212805https://support.apple.com/en-us/HT212814https://support.apple.com/en-us/HT212815https://support.apple.com/en-us/HT212817https://support.apple.com/en-us/HT212819https://support.apple.com/kb/HT212804https://support.apple.com/kb/HT212953